Change in ovirt-engine[engine_3.2]: engine : User can see events which don't belong to him
Michael Pasternak has submitted this change and it was merged.
Change subject: engine : User can see events which don't belong to him
......................................................................
engine : User can see events which don't belong to him
User can see events which are not related to objects he
has permissions on.
This patch introduces a new view user_object_permissions_view
which has the object on which the user has been granted permissions
on and uses it for retrieving the events.
Change-Id: I7b7a6691f6cfa2ca1c0d0d90294ecd93781fce38
Bug-Url: https://bugzilla.redhat.com/921274
Signed-off-by: Ravi Nori <rnori(a)redhat.com>
---
M backend/manager/dbscripts/audit_log_sp.sql
M backend/manager/dbscripts/create_views.sql
2 files changed, 30 insertions(+), 18 deletions(-)
Approvals:
Michael Pasternak: Verified; Looks good to me, approved
--
To view, visit http://gerrit.ovirt.org/13373
To unsubscribe, visit http://gerrit.ovirt.org/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I7b7a6691f6cfa2ca1c0d0d90294ecd93781fce38
Gerrit-PatchSet: 2
Gerrit-Project: ovirt-engine
Gerrit-Branch: engine_3.2
Gerrit-Owner: Ravi Nori <rnori(a)redhat.com>
Gerrit-Reviewer: Michael Pasternak <mpastern(a)redhat.com>
Gerrit-Reviewer: Ofer Schreiber <oschreib(a)redhat.com>
Gerrit-Reviewer: Ravi Nori <rnori(a)redhat.com>
Gerrit-Reviewer: Yair Zaslavsky <yzaslavs(a)redhat.com>